Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/DV4o-pa7bE1DVk5ZDUDqLE1xNuM.roa
File: DV4o-pa7bE1DVk5ZDUDqLE1xNuM.roa (raw, json)
Hash identifier: vxXhUN5PVtjIWV2GInuWXJw6qiMrF0Y1ZWYFmp+Mi9c=
Subject key identifier: 0D:5E:28:FA:96:BB:6C:4D:43:56:4E:59:0D:40:EA:2C:4D:71:36:E3
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019E899385ECC7F45AA622415D376FEFA424
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/DV4o-pa7bE1DVk5ZDUDqLE1xNuM.roa
Signing time: Tue 02 Jun 2026 18:23:26 +0000
ROA not before: Tue 02 Jun 2026 18:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213618
IP address blocks: 2a10:3c00::/29 maxlen: 29
2a11:4fc0::/29 maxlen: 29
2a11:9a80::/29 maxlen: 29
2a11:f600::/29 maxlen: 29
2a12:880::/29 maxlen: 29
2a12:ee00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:93:85:ec:c7:f4:5a:a6:22:41:5d:37:6f:ef:a4:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jun 2 18:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d5e28fa96bb6c4d43564e590d40ea2c4d7136e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:91:0e:b0:09:93:05:ef:d5:d0:2a:3a:09:
6a:b6:99:2e:76:a5:63:68:ad:54:1f:27:23:b8:8b:
ac:bc:8b:ab:b8:71:2a:58:e3:bd:e4:f3:96:05:2a:
b3:78:cf:2a:fe:86:a1:2f:7d:3d:ab:5a:69:a9:9e:
fb:35:26:92:34:da:c3:35:e3:d3:6d:38:7f:2b:7f:
2c:c3:8f:fd:ee:e8:7b:32:a5:b6:42:7a:51:04:7e:
a9:8f:6b:6f:16:63:17:b4:1c:55:a5:e9:01:7c:17:
82:ec:d8:b8:23:4c:53:0e:19:3f:a4:98:fb:32:8d:
7f:01:88:ed:56:5d:34:73:01:2b:06:20:96:59:df:
42:1a:6e:4f:17:07:8a:7e:75:30:43:f0:7d:4e:7d:
f1:90:20:cc:40:51:a6:e7:4f:1c:a3:c7:3f:a8:b6:
2f:cc:c0:00:08:26:d3:4a:15:bd:98:d4:25:f4:da:
a4:97:5c:4f:1d:65:8a:43:77:f3:ed:5b:37:f0:d6:
b9:da:50:11:43:11:e8:ee:a5:7f:09:bf:8e:1d:10:
1e:14:c5:d1:ab:e2:43:cb:8b:95:86:61:d9:2e:9c:
f0:c0:aa:ed:b6:d1:0e:f2:5e:de:73:ec:ce:ba:a9:
6c:9e:e7:7c:ed:a6:80:ea:2b:0d:9b:07:13:f5:27:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:5E:28:FA:96:BB:6C:4D:43:56:4E:59:0D:40:EA:2C:4D:71:36:E3
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/DV4o-pa7bE1DVk5ZDUDqLE1xNuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3c00::/29
2a11:4fc0::/29
2a11:9a80::/29
2a11:f600::/29
2a12:880::/29
2a12:ee00::/29
Signature Algorithm: sha256WithRSAEncryption
a5:26:0f:fd:c4:11:c9:73:37:46:7c:12:5c:81:a9:7f:36:4a:
b4:f8:00:73:8c:a0:b9:e9:45:f2:76:0d:1d:8c:48:ec:1f:a3:
3c:bd:84:18:ac:ff:f4:dc:a4:cb:4f:7e:e3:7e:f4:8b:98:3a:
46:24:0c:7e:57:7c:e6:89:d8:84:fe:40:e8:87:cd:e1:bc:7c:
c6:fd:ce:c2:b1:ec:71:10:89:9f:dc:f8:ca:bd:0a:57:bd:5b:
62:83:07:da:9a:cc:06:91:13:0d:77:75:08:8a:d6:48:79:de:
94:44:0d:a4:d7:23:53:c4:05:e2:85:fa:0e:ce:92:f2:35:0c:
db:cd:45:7b:e4:24:11:64:8f:8f:9b:c5:0e:ae:03:78:ba:17:
75:e9:08:3e:c1:67:a8:13:89:b9:78:3a:c3:89:c9:c1:42:1f:
b5:d4:cc:e2:e0:ca:5b:6e:59:e3:73:ef:30:a7:1a:b3:56:02:
7e:4c:44:46:03:99:42:89:c9:43:32:64:fd:5a:49:e3:4c:c2:
37:c1:e1:31:49:59:04:bf:fe:6c:d4:49:d2:92:90:8e:2a:db:
6d:a3:13:ab:2f:3c:52:d5:8d:6e:86:8f:99:27:27:8a:09:19:
df:3d:cb:9c:65:97:22:a9:5c:6f:93:b2:25:7c:b4:f0:c6:83:
a9:57:a1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:53:55 2026 by rpki-client